Proxmark developers community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

#1 2015-10-06 09:35:27

Erictsk
Contributor
Registered: 2015-05-22
Posts: 37

Need help on Low Frequency Hotel card.

Hi Guys,

My friend just passed me a card that he obtained from a hotel.
I used the proxmark to read the card but could not determine the type of card.
1) I know that it is a LF card, confirmed by HW tune.
2) Using lf search no known tag found. (see logfile below)
3) Is not HID and not EM410x card. confirmed by "lf search" as well as their HID/EM command.
4) Did a "lf search u".

Anyone can advice?

Offline

#2 2015-10-06 09:41:00

Erictsk
Contributor
Registered: 2015-05-22
Posts: 37

Re: Need help on Low Frequency Hotel card.

1444120834_untitled.jpg

Offline

#3 2015-10-06 13:32:37

marshmellow
Moderator
From: US
Registered: 2013-06-10
Posts: 2,234

Re: Need help on Low Frequency Hotel card.

Can you post a plot (data plot. After a lf search)

Offline

#4 2015-10-07 03:21:32

Erictsk
Contributor
Registered: 2015-05-22
Posts: 37

Re: Need help on Low Frequency Hotel card.

Thanks Marshmellow. Find attached the plot after lf search. Do let me know what you need me to plot in order to know what is this card.
1444184470_plot.jpg

Offline

#5 2015-10-07 03:29:09

marshmellow
Moderator
From: US
Registered: 2013-06-10
Posts: 2,234

Re: Need help on Low Frequency Hotel card.

Can you try

lf read
data samples
data rawdemod am 32

Offline

#6 2015-10-07 03:43:59

marshmellow
Moderator
From: US
Registered: 2013-06-10
Posts: 2,234

Re: Need help on Low Frequency Hotel card.

http://www.proxmark.org/forum/viewtopic … 574#p17574
I believe this thread may help you decode your tag.

Offline

#7 2015-10-07 05:04:51

Erictsk
Contributor
Registered: 2015-05-22
Posts: 37

Re: Need help on Low Frequency Hotel card.

proxmark3> lf read
#db# Sampling config:
#db#   [q] divisor:           95
#db#   b] bps:               8 
#db#   [d] decimation:        1     
#db#   [a] averaging:         1                 
#db#   [t] trigger threshold: 0                 
#db# Done, saved 40000 out of 40000 seen samples at 8 bits/sample                 
#db# buffer samples: 00 00 00 00 00 00 15 9b ...                 
proxmark3>
proxmark3> data samples
Reading 39999 bytes from device memory
Data fetched         
Samples @ 8 bits/smpl, decimation 1:1           
proxmark3>
proxmark3> data rawdemod am 32
Using Clock: 32 - Invert: 0 - Bits Found: 500         
# Errors during Demoding (shown as 77 in bit stream): 4         
ASK/Manchester decoded bitstream:         
0000000000000000         
0000000010011011         
0100010111101000         
0000000000000000         
00000000000001771         
77011111111011001         
0001010001000011         
1011100111000101         
1001110101000110         
1110101111001100         
1011100010000000         
0000000000000000         
0000000000000000         
0000000000000000         
0000000000000000         
0000000000001001         
1011010001011110         
1000000000000000         
0000000000000000         
017717701111111101         
1001000101000100         
0011101110011100         
0101100111010100         
0110111010111100         
1100101110001000         
0000000000000000         
0000000000000000         
0000000000000000
0000000000000000         
0000000000000000         
1001101101000101

Offline

#8 2015-10-07 05:06:39

Erictsk
Contributor
Registered: 2015-05-22
Posts: 37

Re: Need help on Low Frequency Hotel card.

Hi Marshmellow. Many thanks for your reply.
I have posted the comments in my previous post.

Offline

#9 2015-10-07 05:54:25

marshmellow
Moderator
From: US
Registered: 2013-06-10
Posts: 2,234

Re: Need help on Low Frequency Hotel card.

Your tag is a ata55x7 with the sequence terminator on (same as the thread I linked to before.). it appears your tag uses all 7 data blocks.
I would suggest reading up on the thread I linked to learn how to manually demod this type of tag, as the ST is not currently supported in the pm3's demods.

Offline

#10 2015-10-07 07:17:39

Erictsk
Contributor
Registered: 2015-05-22
Posts: 37

Re: Need help on Low Frequency Hotel card.

Thanks a lot. I will read through that link and give it a try. Thank you.

Offline

#11 2018-06-11 21:08:29

pruwait
Contributor
Registered: 2018-01-07
Posts: 5

Re: Need help on Low Frequency Hotel card.

Please help! Another hotel card can`t detect.

proxmark3> lf read
#db# LF Sampling config:           
#db#   [q] divisor:           95           
#db#   [b] bps:               8           
#db#   [d] decimation:        1           
#db#   [a] averaging:         1           
#db#   [t] trigger threshold: 0           
#db# Done, saved 40000 out of 40000 seen samples at 8 bits/sample          
#db# buffer samples: ff ff ff ff ff ff f8 ff ...          
Reading 39999 bytes from device memory
          
Data fetched          
Samples @ 8 bits/smpl, decimation 1:1           
proxmark3> data sample
Reading 39999 bytes from device memory
          
Data fetched          
Samples @ 8 bits/smpl, decimation 1:1           
proxmark3> data rawdemod am

Using Clock:64, Invert:0, Bits Found:625          
ASK/Manchester - Clock: 64 - Decoded bitstream:          
0010001011100111
0010000000000010
0001000000000001
0000001001001100
1110001111100011
0110010000000000
0001011011110001
0010100001011100
1010011000000010
0100110001001010
0010001011100111
0010000000000010
0001000000000001
0000001001001100
1110001111100011
0110010000000000
0001011011110001
0010100001011100
1010011000000010
0100110001001010
0010001011100111
0010000000000010
0001000000000001
0000001001001100
1110001111100011
0110010000000000
0001011011110001
0010100001011100
1010011000000010
0100110001001010
0010001011100111
0010000000000010
          
proxmark3> data print x
DemodBuffer: 22E720021001024CE3E3640016F1285CA6024C4A22E720021001024CE3E3640016F1285CA6024C4A22E720021001024CE3E3640016F1285CA6024C4A22E72002  

What is the tag?

Offline

Board footer

Powered by FluxBB